Server Security, Software Releases, and Critical Patch Updates

To ensure continued security of your system, Oracle strongly recommends that
you apply the latest Software Releases. Server Software Releases include Oracle
ILOM, BIOS, and other firmware updates, often referred to as “patches.” Oracle
publishes these patches regularly on the My Oracle Support site. Applying these
patches will help ensure optimal system performance, security, and stability.
You can identify the latest Software Release for your system at https://www.oracle.com/technetwork/systems/patches/firmware/release-history-jsp-138416.html.

Oracle notifies customers about security vulnerability fixes for all its
products four times a year through the Critical Patch Update (CPU) program.
Customers should review the CPU advisories to ensure that the latest software
release updates are applied to their Oracle products. Note that updates for
Engineered Systems will be specifically published for a specific Engineered
Systems product (that is, you need not look at specific updates for individual
software components included in your Engineered System). For more information
about the Oracle CPU program, go to https://www.oracle.com/technetwork/topics/security/alerts-086861.html.

Oracle also recommends that you update to the latest operating system release
when it becomes available. Although a minimum operating system release is
supported, updating to the latest OS release will ensure that you have the most
up-to-date software and security patches. To confirm that you have the latest OS
release, refer to the Oracle Hardware Compatibility Lists. See Supported Operating Systems.